Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft
File:                     JzWxnbJ9Py131AgYhFO-JrNFUK0.mft (raw, json)
Hash identifier:          ve9wpIIEtHty/ZjjK6agem3xdGcWbZfxQrLD1DL2d7Q=
Subject key identifier:   6F:D3:29:95:C3:F0:5F:86:BD:7D:E2:A8:5C:6B:42:9B:AF:D1:8B:B6
Authority key identifier: 27:35:B1:9D:B2:7D:3F:2D:77:D4:08:18:84:53:BE:26:B3:45:50:AD
Certificate issuer:       /CN=2735b19db27d3f2d77d408188453be26b34550ad
Certificate serial:       0198D5F14703808BE21E526F00A5717ACFC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft
Manifest number:          03AD
Signing time:             Sat 23 Aug 2025 08:00:15 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:15 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:15 +0000
Files and hashes:         1: 8Xi47DC6XLMifd_h4diEuTQqT_o.roa (hash: CN0wU8kNDOjW0/AZxclgk/MCq6Ngl7PcvBwvgiUpVIs=)
                          2: JzWxnbJ9Py131AgYhFO-JrNFUK0.crl (hash: hZDVliunHDr4Cv50T2ICWrfYiyXBqmq8qN70GNo8XUk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:47:03:80:8b:e2:1e:52:6f:00:a5:71:7a:cf:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2735b19db27d3f2d77d408188453be26b34550ad
        Validity
            Not Before: Aug 23 08:00:15 2025 GMT
            Not After : Aug 24 08:00:15 2025 GMT
        Subject: CN=6fd32995c3f05f86bd7de2a85c6b429bafd18bb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:75:3f:ed:57:7e:d4:b5:0a:b3:ef:fb:04:92:
                    57:8e:53:71:a0:f4:c6:c3:0f:f2:74:02:1b:bf:ca:
                    7e:49:0b:bd:3b:7a:f6:d4:f4:ad:b2:66:47:a3:23:
                    2a:78:75:cf:63:a2:d3:ae:35:8f:a1:35:bb:d1:5f:
                    4e:7f:b8:1c:b6:6e:43:28:ca:e5:d9:70:79:e7:aa:
                    9e:66:44:6a:75:ed:c9:7a:46:fc:3f:c3:8c:9b:82:
                    1c:f3:de:39:1d:34:6a:77:94:69:25:96:cd:12:56:
                    d0:30:bb:20:fa:91:66:29:63:4a:58:18:09:5e:1c:
                    ae:3d:24:8b:46:1a:15:42:5c:c6:33:0b:87:28:71:
                    b3:86:ec:dd:a1:8f:e6:da:82:84:8e:ba:94:fd:c7:
                    af:7b:02:fa:67:ec:3a:70:d7:10:6f:87:cd:f7:ad:
                    ef:6b:f2:99:43:39:f6:d7:1b:70:82:9f:f1:37:20:
                    33:42:c2:e2:72:df:60:2e:53:ee:eb:3a:04:c5:82:
                    80:89:7c:d5:f5:37:ac:f2:e2:e6:2a:ab:38:73:74:
                    b2:50:5c:b1:7c:af:d2:08:dc:0f:c1:2c:33:48:8a:
                    a3:6e:2f:06:93:29:6b:2b:bd:76:7b:ea:b5:18:38:
                    6d:b1:33:ed:b7:8b:e9:90:bf:eb:3e:c9:31:d6:86:
                    1d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D3:29:95:C3:F0:5F:86:BD:7D:E2:A8:5C:6B:42:9B:AF:D1:8B:B6
            X509v3 Authority Key Identifier:
                keyid:27:35:B1:9D:B2:7D:3F:2D:77:D4:08:18:84:53:BE:26:B3:45:50:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:89:a6:bb:3f:ac:bc:d3:53:fd:51:29:a8:09:2b:4c:db:62:
         4e:b8:3b:c0:27:23:b7:b1:3d:42:79:fb:09:03:e0:e6:59:38:
         2b:47:cc:fe:e3:d3:b1:5e:85:c0:bd:db:d9:52:a1:db:f5:fe:
         76:83:34:60:a0:7e:0e:6e:44:f9:bf:c6:6b:17:64:1b:f0:d5:
         ba:4c:38:3e:e1:6e:4a:49:a0:0c:f0:77:a4:a2:32:da:66:f8:
         f3:7a:de:d4:33:44:ac:1b:1e:f8:f3:75:1f:f8:a1:03:36:76:
         c1:a0:ac:d8:07:ba:4a:bc:6f:cb:90:ff:e9:c8:98:f8:f8:b6:
         80:c6:71:ba:ab:44:b1:09:df:79:ed:19:4c:da:c0:ea:3d:be:
         5c:0c:bf:df:0b:bc:1d:1c:c2:0c:41:da:51:ac:17:bc:e6:25:
         3d:d0:8b:c4:d0:96:61:9e:d5:51:99:9a:cc:6b:8b:26:9f:cb:
         e6:5e:81:ee:04:c6:59:4b:b5:ca:c0:50:1c:c7:18:33:79:6a:
         8d:1b:a6:2e:7f:bb:ba:ca:3b:ea:31:e5:f8:78:db:38:ae:8e:
         5e:8d:5d:fd:38:b4:b9:fe:aa:e7:99:7a:5f:d9:2e:3b:6c:90:
         83:52:ae:a2:94:a1:82:4e:5d:be:15:c6:b7:06:27:1a:7f:45:
         65:35:ea:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8UcDgIviHlJvAKVxes/DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MzViMTlkYjI3ZDNmMmQ3N2Q0MDgxODg0NTNiZTI2YjM0
NTUwYWQwHhcNMjUwODIzMDgwMDE1WhcNMjUwODI0MDgwMDE1WjAzMTEwLwYDVQQD
Eyg2ZmQzMjk5NWMzZjA1Zjg2YmQ3ZGUyYTg1YzZiNDI5YmFmZDE4YmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnU/7Vd+1LUKs+/7BJJXjlNxoPTG
ww/ydAIbv8p+SQu9O3r21PStsmZHoyMqeHXPY6LTrjWPoTW70V9Of7gctm5DKMrl
2XB556qeZkRqde3Jekb8P8OMm4Ic8945HTRqd5RpJZbNElbQMLsg+pFmKWNKWBgJ
XhyuPSSLRhoVQlzGMwuHKHGzhuzdoY/m2oKEjrqU/cevewL6Z+w6cNcQb4fN963v
a/KZQzn21xtwgp/xNyAzQsLict9gLlPu6zoExYKAiXzV9Tes8uLmKqs4c3SyUFyx
fK/SCNwPwSwzSIqjbi8GkylrK712e+q1GDhtsTPtt4vpkL/rPskx1oYd/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/TKZXD8F+GvX3iqFxrQpuv0Yu2MB8GA1UdIwQY
MBaAFCc1sZ2yfT8td9QIGIRTviazRVCtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnpXeG5iSjlQeTEzMUFnWWhGTy1Kck5GVUswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wMDY4MmMtZjMwZS00OTQ1LWFkODQt
YzViMGVmNGU3YmM2LzEvSnpXeG5iSjlQeTEzMUFnWWhGTy1Kck5GVUswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8wMDY4MmMtZjMwZS00OTQ1LWFkODQtYzViMGVmNGU3YmM2
LzEvSnpXeG5iSjlQeTEzMUFnWWhGTy1Kck5GVUswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ4mmuz+s
vNNT/VEpqAkrTNtiTrg7wCcjt7E9Qnn7CQPg5lk4K0fM/uPTsV6FwL3b2VKh2/X+
doM0YKB+Dm5E+b/GaxdkG/DVukw4PuFuSkmgDPB3pKIy2mb483re1DNErBse+PN1
H/ihAzZ2waCs2Ae6Srxvy5D/6ciY+Pi2gMZxuqtEsQnfee0ZTNrA6j2+XAy/3wu8
HRzCDEHaUawXvOYlPdCLxNCWYZ7VUZmazGuLJp/L5l6B7gTGWUu1ysBQHMcYM3lq
jRumLn+7uso76jHl+HjbOK6OXo1d/Ti0uf6q55l6X9kuO2yQg1KuopShgk5dvhXG
twYnGn9FZTXqqg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:28:38 2025 by rpki-client